Are certificates instead of passwords supported for DDF users of ACF2 for DB2?
Release : 1.3
From the security standpoint, certificates can be used for system entry validation for DDF users of ACF2 for DB2.
There are two ways for application to perform this authentication using any ESM (ACF2/Top Secret/RACF):
Depending on what application is being used to connect to db2 using DDF, it is up to the application to make the security call and pass digital certificate as identification.
Next, ESM will search the security database for a matching certificate's serial number and issuer's distinguished name, if no match is found, initACEE attempts to locate an appropriate certificate name filter(ACF2 and Top Secret CERTMAP record, RACF RACDCERT MAP) by searching using a series of full and partial distinguished names until the most specific matching filter is found.